@@ -49,7 +49,10 @@ var ViewerPolicy = policy.NewPolicy(
|
|||||||
// Entity read actions
|
// Entity read actions
|
||||||
policy.Allow(
|
policy.Allow(
|
||||||
ActionPeopleGet, ActionPeopleList,
|
ActionPeopleGet, ActionPeopleList,
|
||||||
ActionVendorList,
|
ActionVendorGet, ActionVendorList,
|
||||||
|
ActionVendorContactGet,
|
||||||
|
ActionVendorServiceGet,
|
||||||
|
ActionVendorComplianceReportGet,
|
||||||
ActionFrameworkGet, ActionFrameworkList,
|
ActionFrameworkGet, ActionFrameworkList,
|
||||||
ActionControlList,
|
ActionControlList,
|
||||||
ActionMeasureGet, ActionMeasureList,
|
ActionMeasureGet, ActionMeasureList,
|
||||||
@@ -68,7 +71,7 @@ var ViewerPolicy = policy.NewPolicy(
|
|||||||
ActionContinualImprovementList,
|
ActionContinualImprovementList,
|
||||||
ActionProcessingActivityList,
|
ActionProcessingActivityList,
|
||||||
ActionSnapshotList,
|
ActionSnapshotList,
|
||||||
ActionMeetingList,
|
ActionMeetingGet, ActionMeetingList,
|
||||||
ActionFileGet, ActionFileDownloadUrl,
|
ActionFileGet, ActionFileDownloadUrl,
|
||||||
ActionSlackConnectionList,
|
ActionSlackConnectionList,
|
||||||
).WithSID("entity-read-access"),
|
).WithSID("entity-read-access"),
|
||||||
@@ -76,6 +79,7 @@ var ViewerPolicy = policy.NewPolicy(
|
|||||||
// TrustCenter read actions
|
// TrustCenter read actions
|
||||||
policy.Allow(
|
policy.Allow(
|
||||||
ActionTrustCenterGet,
|
ActionTrustCenterGet,
|
||||||
|
ActionTrustCenterAccessGet,
|
||||||
ActionTrustCenterFileGet, ActionTrustCenterFileList,
|
ActionTrustCenterFileGet, ActionTrustCenterFileList,
|
||||||
).WithSID("trust-center-read-access"),
|
).WithSID("trust-center-read-access"),
|
||||||
|
|
||||||
@@ -106,7 +110,10 @@ var AuditorPolicy = policy.NewPolicy(
|
|||||||
// Entity read access (same as viewer)
|
// Entity read access (same as viewer)
|
||||||
policy.Allow(
|
policy.Allow(
|
||||||
ActionPeopleGet, ActionPeopleList,
|
ActionPeopleGet, ActionPeopleList,
|
||||||
ActionVendorList,
|
ActionVendorGet, ActionVendorList,
|
||||||
|
ActionVendorContactGet,
|
||||||
|
ActionVendorServiceGet,
|
||||||
|
ActionVendorComplianceReportGet,
|
||||||
ActionFrameworkGet, ActionFrameworkList,
|
ActionFrameworkGet, ActionFrameworkList,
|
||||||
ActionControlList,
|
ActionControlList,
|
||||||
ActionMeasureGet, ActionMeasureList,
|
ActionMeasureGet, ActionMeasureList,
|
||||||
@@ -124,6 +131,7 @@ var AuditorPolicy = policy.NewPolicy(
|
|||||||
ActionContinualImprovementList,
|
ActionContinualImprovementList,
|
||||||
ActionProcessingActivityList,
|
ActionProcessingActivityList,
|
||||||
ActionSnapshotList,
|
ActionSnapshotList,
|
||||||
|
ActionMeetingGet, ActionMeetingList,
|
||||||
ActionFileGet, ActionFileDownloadUrl,
|
ActionFileGet, ActionFileDownloadUrl,
|
||||||
).WithSID("entity-read-access"),
|
).WithSID("entity-read-access"),
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user